Upstream information

CVE-2025-39738 at MITRE

Description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: do not allow relocation of partially dropped subvolumes

[BUG]
There is an internal report that balance triggered transaction abort,
with the following call trace:

item 85 key (594509824 169 0) itemoff 12599 itemsize 33
extent refs 1 gen 197740 flags 2
ref#0: tree block backref root 7
item 86 key (594558976 169 0) itemoff 12566 itemsize 33
extent refs 1 gen 197522 flags 2
ref#0: tree block backref root 7
...
BTRFS error (device loop0): extent item not found for insert, bytenr 594526208 num_bytes 16384 parent 449921024 root_objectid 934 owner 1 offset 0
BTRFS error (device loop0): failed to run delayed ref for logical 594526208 num_bytes 16384 type 182 action 1 ref_mod 1: -117
------------[ cut here ]------------
BTRFS: Transaction aborted (error -117)
WARNING: CPU: 1 PID: 6963 at ../fs/btrfs/extent-tree.c:2168 btrfs_run_delayed_refs+0xfa/0x110 [btrfs]

And btrfs check doesn't report anything wrong related to the extent
tree.

[CAUSE]
The cause is a little complex, firstly the extent tree indeed doesn't
have the backref for 594526208.

The extent tree only have the following two backrefs around that bytenr
on-disk:

item 65 key (594509824 METADATA_ITEM 0) itemoff 13880 itemsize 33
refs 1 gen 197740 flags TREE_BLOCK
tree block skinny level 0
(176 0x7) tree block backref root CSUM_TREE
item 66 key (594558976 METADATA_ITEM 0) itemoff 13847 itemsize 33
refs 1 gen 197522 flags TREE_BLOCK
tree block skinny level 0
(176 0x7) tree block backref root CSUM_TREE

But the such missing backref item is not an corruption on disk, as the
offending delayed ref belongs to subvolume 934, and that subvolume is
being dropped:

item 0 key (934 ROOT_ITEM 198229) itemoff 15844 itemsize 439
generation 198229 root_dirid 256 bytenr 10741039104 byte_limit 0 bytes_used 345571328
last_snapshot 198229 flags 0x1000000000001(RDONLY) refs 0
drop_progress key (206324 EXTENT_DATA 2711650304) drop_level 2
level 2 generation_v2 198229

And that offending tree block 594526208 is inside the dropped range of
that subvolume. That explains why there is no backref item for that
bytenr and why btrfs check is not reporting anything wrong.

But this also shows another problem, as btrfs will do all the orphan
subvolume cleanup at a read-write mount.

So half-dropped subvolume should not exist after an RW mount, and
balance itself is also exclusive to subvolume cleanup, meaning we
shouldn't hit a subvolume half-dropped during relocation.

The root cause is, there is no orphan item for this subvolume.
In fact there are 5 subvolumes from around 2021 that have the same
problem.

It looks like the original report has some older kernels running, and
caused those zombie subvolumes.

Thankfully upstream commit 8d488a8c7ba2 ("btrfs: fix subvolume/snapshot
deletion not triggered on mount") has long fixed the bug.

[ENHANCEMENT]
For repairing such old fs, btrfs-progs will be enhanced.

Considering how delayed the problem will show up (at run delayed ref
time) and at that time we have to abort transaction already, it is too
late.

Instead here we reject any half-dropped subvolume for reloc tree at the
earliest time, preventing confusion and extra time wasted on debugging
similar bugs.

SUSE information

Overall state of this security issue: Pending

This issue is currently rated as having moderate severity.

CVSS v3 Scores
CVSS detail SUSE
Base Score 4.4
Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality Impact None
Integrity Impact Low
Availability Impact Low
CVSSv3 Version 3.1
CVSS v4 Scores
CVSS detail SUSE
Base Score 4.8
Vector CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Attack Vector Local
Attack Complexity Low
Attack Requirements None
Privileges Required Low
User Interaction None
Vulnerable System Confidentiality Impact None
Vulnerable System Integrity Impact Low
Vulnerable System Availability Impact Low
Subsequent System Confidentiality Impact None
Subsequent System Integrity Impact None
Subsequent System Availability Impact None
CVSSv4 Version 4.0

Note from the SUSE Security Team on the kernel-default package

SUSE will no longer fix all CVEs in the Linux Kernel anymore, but declare some bug classes as won't fix. Please refer to TID 21496 for more details.

SUSE Bugzilla entry: 1249540 [NEW]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
Container suse/hpc/warewulf4-x86_64/sle-hpc-node:15.6.17.8.116
Image SLES15-SP6-BYOS
Image SLES15-SP6-BYOS-Azure
Image SLES15-SP6-BYOS-EC2
Image SLES15-SP6-BYOS-GCE
Image SLES15-SP6-CHOST-BYOS
Image SLES15-SP6-CHOST-BYOS-Aliyun
Image SLES15-SP6-CHOST-BYOS-Azure
Image SLES15-SP6-CHOST-BYOS-EC2
Image SLES15-SP6-CHOST-BYOS-GCE
Image SLES15-SP6-CHOST-BYOS-GDC
Image SLES15-SP6-CHOST-BYOS-SAP-CCloud
Image SLES15-SP6-EC2
Image SLES15-SP6-EC2-ECS-HVM
Image SLES15-SP6-GCE
Image SLES15-SP6-HPC-BYOS
Image SLES15-SP6-HPC-BYOS-Azure
Image SLES15-SP6-HPC-BYOS-EC2
Image SLES15-SP6-HPC-BYOS-GCE
Image SLES15-SP6-HPC-EC2
Image SLES15-SP6-HPC-GCE
Image SLES15-SP6-Hardened-BYOS
Image SLES15-SP6-Hardened-BYOS-Azure
Image SLES15-SP6-Hardened-BYOS-EC2
Image SLES15-SP6-Hardened-BYOS-GCE
Image SLES15-SP6-SAP
Image SLES15-SP6-SAP-Azure
Image SLES15-SP6-SAP-EC2
Image SLES15-SP6-SAP-GCE
Image SLES15-SP6-SAPCAL
Image SLES15-SP6-SAPCAL-Azure
Image SLES15-SP6-SAPCAL-EC2
Image SLES15-SP6-SAPCAL-GCE
  • kernel-default >= 6.4.0-150600.23.73.1
Container suse/sl-micro/6.0/base-os-container:2.1.3-7.57
Container suse/sl-micro/6.1/base-os-container:2.2.1-5.40
  • kernel-default >= 6.4.0-35.1
Container suse/sl-micro/6.0/kvm-os-container:2.1.3-6.80
Container suse/sl-micro/6.1/kvm-os-container:2.2.1-5.41
  • kernel-default-base >= 6.4.0-35.1.21.12
Container suse/sl-micro/6.0/rt-os-container:2.1.3-7.95
Container suse/sl-micro/6.1/rt-os-container:2.2.1-5.34
  • kernel-rt >= 6.4.0-37.1
Image SLES15-SP6-SAP-Azure-3P
Image SLES15-SP6-SAP-BYOS
Image SLES15-SP6-SAP-BYOS-Azure
Image SLES15-SP6-SAP-BYOS-EC2
Image SLES15-SP6-SAP-BYOS-GCE
Image SLES15-SP6-SAP-Hardened
Image SLES15-SP6-SAP-Hardened-Azure
Image SLES15-SP6-SAP-Hardened-BYOS
Image SLES15-SP6-SAP-Hardened-BYOS-Azure
Image SLES15-SP6-SAP-Hardened-BYOS-EC2
Image SLES15-SP6-SAP-Hardened-BYOS-GCE
Image SLES15-SP6-SAP-Hardened-EC2
Image SLES15-SP6-SAP-Hardened-GCE
  • cluster-md-kmp-default >= 6.4.0-150600.23.73.1
  • dlm-kmp-default >= 6.4.0-150600.23.73.1
  • gfs2-kmp-default >= 6.4.0-150600.23.73.1
  • kernel-default >= 6.4.0-150600.23.73.1
  • ocfs2-kmp-default >= 6.4.0-150600.23.73.1
Image SLES15-SP6
Image SLES15-SP6-Azure-3P
Image SLES15-SP6-Azure-Standard
Image SLES15-SP6-HPC
Image SLES15-SP6-HPC-Azure
  • kernel-azure >= 6.4.0-150600.8.52.1
Image SLES15-SP7-Azure-3P
Image SLES15-SP7-Azure-Basic
Image SLES15-SP7-Azure-Standard
Image SLES15-SP7-HPC-Azure
  • kernel-azure >= 6.4.0-150700.20.15.2
Image SLES15-SP7-BYOS-Azure
Image SLES15-SP7-BYOS-EC2
Image SLES15-SP7-BYOS-GCE
Image SLES15-SP7-CHOST-BYOS-Aliyun
Image SLES15-SP7-CHOST-BYOS-Azure
Image SLES15-SP7-CHOST-BYOS-EC2
Image SLES15-SP7-CHOST-BYOS-GCE
Image SLES15-SP7-CHOST-BYOS-GDC
Image SLES15-SP7-CHOST-BYOS-SAP-CCloud
Image SLES15-SP7-EC2
Image SLES15-SP7-EC2-ECS-HVM
Image SLES15-SP7-GCE
Image SLES15-SP7-HPC-BYOS-Azure
Image SLES15-SP7-HPC-BYOS-EC2
Image SLES15-SP7-HPC-BYOS-GCE
Image SLES15-SP7-Hardened-BYOS-Azure
Image SLES15-SP7-Hardened-BYOS-EC2
Image SLES15-SP7-Hardened-BYOS-GCE
Image SLES15-SP7-SAPCAL-Azure
Image SLES15-SP7-SAPCAL-EC2
Image SLES15-SP7-SAPCAL-GCE
  • kernel-default >= 6.4.0-150700.53.19.1
Image SLES15-SP7-SAP-Azure
Image SLES15-SP7-SAP-Azure-3P
Image SLES15-SP7-SAP-BYOS-Azure
Image SLES15-SP7-SAP-BYOS-EC2
Image SLES15-SP7-SAP-BYOS-GCE
Image SLES15-SP7-SAP-EC2
Image SLES15-SP7-SAP-GCE
Image SLES15-SP7-SAP-Hardened-Azure
Image SLES15-SP7-SAP-Hardened-BYOS-Azure
Image SLES15-SP7-SAP-Hardened-BYOS-EC2
Image SLES15-SP7-SAP-Hardened-BYOS-GCE
Image SLES15-SP7-SAP-Hardened-GCE
  • cluster-md-kmp-default >= 6.4.0-150700.53.19.1
  • dlm-kmp-default >= 6.4.0-150700.53.19.1
  • gfs2-kmp-default >= 6.4.0-150700.53.19.1
  • kernel-default >= 6.4.0-150700.53.19.1
  • ocfs2-kmp-default >= 6.4.0-150700.53.19.1
SUSE Linux Enterprise Desktop 15 SP6
  • kernel-64kb >= 6.4.0-150600.23.73.1
  • kernel-64kb-devel >= 6.4.0-150600.23.73.1
  • kernel-default >= 6.4.0-150600.23.73.1
  • kernel-default-base >= 6.4.0-150600.23.73.1.150600.12.32.1
  • kernel-default-devel >= 6.4.0-150600.23.73.1
  • kernel-default-extra >= 6.4.0-150600.23.73.1
  • kernel-devel >= 6.4.0-150600.23.73.1
  • kernel-docs >= 6.4.0-150600.23.73.1
  • kernel-macros >= 6.4.0-150600.23.73.1
  • kernel-obs-build >= 6.4.0-150600.23.73.1
  • kernel-source >= 6.4.0-150600.23.73.1
  • kernel-syms >= 6.4.0-150600.23.73.1
  • kernel-zfcpdump >= 6.4.0-150600.23.73.1
 Patchnames:
SUSE-SLE-Module-Basesystem-15-SP6-2025-3600
SUSE-SLE-Module-Development-Tools-15-SP6-2025-3600
SUSE-SLE-Product-WE-15-SP6-2025-3600
SUSE Linux Enterprise Desktop 15 SP7
  • kernel-64kb >= 6.4.0-150700.53.19.1
  • kernel-64kb-devel >= 6.4.0-150700.53.19.1
  • kernel-default >= 6.4.0-150700.53.19.1
  • kernel-default-base >= 6.4.0-150700.53.19.1.150700.17.13.1
  • kernel-default-devel >= 6.4.0-150700.53.19.1
  • kernel-default-extra >= 6.4.0-150700.53.19.1
  • kernel-devel >= 6.4.0-150700.53.19.1
  • kernel-docs >= 6.4.0-150700.53.19.1
  • kernel-macros >= 6.4.0-150700.53.19.1
  • kernel-obs-build >= 6.4.0-150700.53.19.1
  • kernel-source >= 6.4.0-150700.53.19.1
  • kernel-syms >= 6.4.0-150700.53.19.1
  • kernel-zfcpdump >= 6.4.0-150700.53.19.1
 Patchnames:
SUSE-SLE-Module-Basesystem-15-SP7-2025-3601
SUSE-SLE-Module-Development-Tools-15-SP7-2025-3601
SUSE-SLE-Product-WE-15-SP7-2025-3601
SUSE Linux Enterprise High Availability Extension 15 SP6
  • cluster-md-kmp-default >= 6.4.0-150600.23.73.1
  • dlm-kmp-default >= 6.4.0-150600.23.73.1
  • gfs2-kmp-default >= 6.4.0-150600.23.73.1
  • ocfs2-kmp-default >= 6.4.0-150600.23.73.1
 Patchnames:
SUSE-SLE-Product-HA-15-SP6-2025-3600
SUSE Linux Enterprise High Availability Extension 15 SP7
  • cluster-md-kmp-default >= 6.4.0-150700.53.19.1
  • dlm-kmp-default >= 6.4.0-150700.53.19.1
  • gfs2-kmp-default >= 6.4.0-150700.53.19.1
  • ocfs2-kmp-default >= 6.4.0-150700.53.19.1
 Patchnames:
SUSE-SLE-Product-HA-15-SP7-2025-3601
SUSE Linux Enterprise High Performance Computing 15 SP6
  • kernel-64kb >= 6.4.0-150600.23.73.1
  • kernel-64kb-devel >= 6.4.0-150600.23.73.1
  • kernel-azure >= 6.4.0-150600.8.52.1
  • kernel-azure-devel >= 6.4.0-150600.8.52.1
  • kernel-default >= 6.4.0-150600.23.73.1
  • kernel-default-base >= 6.4.0-150600.23.73.1.150600.12.32.1
  • kernel-default-devel >= 6.4.0-150600.23.73.1
  • kernel-devel >= 6.4.0-150600.23.73.1
  • kernel-devel-azure >= 6.4.0-150600.8.52.1
  • kernel-docs >= 6.4.0-150600.23.73.1
  • kernel-macros >= 6.4.0-150600.23.73.1
  • kernel-obs-build >= 6.4.0-150600.23.73.1
  • kernel-source >= 6.4.0-150600.23.73.1
  • kernel-source-azure >= 6.4.0-150600.8.52.1
  • kernel-syms >= 6.4.0-150600.23.73.1
  • kernel-syms-azure >= 6.4.0-150600.8.52.1
  • kernel-zfcpdump >= 6.4.0-150600.23.73.1
  • reiserfs-kmp-default >= 6.4.0-150600.23.73.1
 Patchnames:
SUSE-SLE-Module-Basesystem-15-SP6-2025-3600
SUSE-SLE-Module-Development-Tools-15-SP6-2025-3600
SUSE-SLE-Module-Legacy-15-SP6-2025-3600
SUSE-SLE-Module-Public-Cloud-15-SP6-2025-3634
SUSE Linux Enterprise High Performance Computing 15 SP7
  • kernel-64kb >= 6.4.0-150700.53.19.1
  • kernel-64kb-devel >= 6.4.0-150700.53.19.1
  • kernel-azure >= 6.4.0-150700.20.15.2
  • kernel-azure-devel >= 6.4.0-150700.20.15.2
  • kernel-default >= 6.4.0-150700.53.19.1
  • kernel-default-base >= 6.4.0-150700.53.19.1.150700.17.13.1
  • kernel-default-devel >= 6.4.0-150700.53.19.1
  • kernel-devel >= 6.4.0-150700.53.19.1
  • kernel-devel-azure >= 6.4.0-150700.20.15.2
  • kernel-docs >= 6.4.0-150700.53.19.1
  • kernel-macros >= 6.4.0-150700.53.19.1
  • kernel-obs-build >= 6.4.0-150700.53.19.1
  • kernel-source >= 6.4.0-150700.53.19.1
  • kernel-source-azure >= 6.4.0-150700.20.15.2
  • kernel-syms >= 6.4.0-150700.53.19.1
  • kernel-syms-azure >= 6.4.0-150700.20.15.1
  • kernel-zfcpdump >= 6.4.0-150700.53.19.1
  • reiserfs-kmp-default >= 6.4.0-150700.53.19.1
 Patchnames:
SUSE-SLE-Module-Basesystem-15-SP7-2025-3601
SUSE-SLE-Module-Development-Tools-15-SP7-2025-3601
SUSE-SLE-Module-Legacy-15-SP7-2025-3601
SUSE-SLE-Module-Public-Cloud-15-SP7-2025-3633
SUSE Linux Enterprise Live Patching 15 SP6
    		Patchnames:
    SUSE-SLE-Module-Live-Patching-15-SP6-2025-3751
    SUSE Linux Enterprise Live Patching 15 SP7
      		Patchnames:
      SUSE-SLE-Module-Live-Patching-15-SP7-2025-3725
      SUSE Linux Enterprise Module for Basesystem 15 SP6
      • kernel-64kb >= 6.4.0-150600.23.73.1
      • kernel-64kb-devel >= 6.4.0-150600.23.73.1
      • kernel-default >= 6.4.0-150600.23.73.1
      • kernel-default-base >= 6.4.0-150600.23.73.1.150600.12.32.1
      • kernel-default-devel >= 6.4.0-150600.23.73.1
      • kernel-devel >= 6.4.0-150600.23.73.1
      • kernel-macros >= 6.4.0-150600.23.73.1
      • kernel-zfcpdump >= 6.4.0-150600.23.73.1
      		 Patchnames:
      SUSE-SLE-Module-Basesystem-15-SP6-2025-3600
      SUSE Linux Enterprise Module for Basesystem 15 SP7
      • kernel-64kb >= 6.4.0-150700.53.19.1
      • kernel-64kb-devel >= 6.4.0-150700.53.19.1
      • kernel-default >= 6.4.0-150700.53.19.1
      • kernel-default-base >= 6.4.0-150700.53.19.1.150700.17.13.1
      • kernel-default-devel >= 6.4.0-150700.53.19.1
      • kernel-devel >= 6.4.0-150700.53.19.1
      • kernel-macros >= 6.4.0-150700.53.19.1
      • kernel-zfcpdump >= 6.4.0-150700.53.19.1
      		 Patchnames:
      SUSE-SLE-Module-Basesystem-15-SP7-2025-3601
      SUSE Linux Enterprise Module for Development Tools 15 SP6
      • kernel-docs >= 6.4.0-150600.23.73.1
      • kernel-obs-build >= 6.4.0-150600.23.73.1
      • kernel-source >= 6.4.0-150600.23.73.1
      • kernel-syms >= 6.4.0-150600.23.73.1
      		 Patchnames:
      SUSE-SLE-Module-Development-Tools-15-SP6-2025-3600
      SUSE Linux Enterprise Module for Development Tools 15 SP7
      • kernel-docs >= 6.4.0-150700.53.19.1
      • kernel-obs-build >= 6.4.0-150700.53.19.1
      • kernel-source >= 6.4.0-150700.53.19.1
      • kernel-syms >= 6.4.0-150700.53.19.1
      		 Patchnames:
      SUSE-SLE-Module-Development-Tools-15-SP7-2025-3601
      SUSE Linux Enterprise Module for Legacy 15 SP6
      • reiserfs-kmp-default >= 6.4.0-150600.23.73.1
      		 Patchnames:
      SUSE-SLE-Module-Legacy-15-SP6-2025-3600
      SUSE Linux Enterprise Module for Legacy 15 SP7
      • reiserfs-kmp-default >= 6.4.0-150700.53.19.1
      		 Patchnames:
      SUSE-SLE-Module-Legacy-15-SP7-2025-3601
      SUSE Linux Enterprise Module for Public Cloud 15 SP6
      • kernel-azure >= 6.4.0-150600.8.52.1
      • kernel-azure-devel >= 6.4.0-150600.8.52.1
      • kernel-devel-azure >= 6.4.0-150600.8.52.1
      • kernel-source-azure >= 6.4.0-150600.8.52.1
      • kernel-syms-azure >= 6.4.0-150600.8.52.1
      		 Patchnames:
      SUSE-SLE-Module-Public-Cloud-15-SP6-2025-3634
      SUSE Linux Enterprise Module for Public Cloud 15 SP7
      • kernel-azure >= 6.4.0-150700.20.15.2
      • kernel-azure-devel >= 6.4.0-150700.20.15.2
      • kernel-devel-azure >= 6.4.0-150700.20.15.2
      • kernel-source-azure >= 6.4.0-150700.20.15.2
      • kernel-syms-azure >= 6.4.0-150700.20.15.1
      		 Patchnames:
      SUSE-SLE-Module-Public-Cloud-15-SP7-2025-3633
      SUSE Linux Enterprise Real Time 15 SP6
      SUSE Real Time Module 15 SP6
      • cluster-md-kmp-rt >= 6.4.0-150600.10.55.1
      • dlm-kmp-rt >= 6.4.0-150600.10.55.1
      • gfs2-kmp-rt >= 6.4.0-150600.10.55.1
      • kernel-devel-rt >= 6.4.0-150600.10.55.1
      • kernel-rt >= 6.4.0-150600.10.55.1
      • kernel-rt-devel >= 6.4.0-150600.10.55.1
      • kernel-rt_debug >= 6.4.0-150600.10.55.1
      • kernel-rt_debug-devel >= 6.4.0-150600.10.55.1
      • kernel-source-rt >= 6.4.0-150600.10.55.1
      • kernel-syms-rt >= 6.4.0-150600.10.55.1
      • ocfs2-kmp-rt >= 6.4.0-150600.10.55.1
      		 Patchnames:
      SUSE-SLE-Module-RT-15-SP6-2025-3751
      SUSE Linux Enterprise Real Time 15 SP7
      SUSE Real Time Module 15 SP7
      • cluster-md-kmp-rt >= 6.4.0-150700.7.19.1
      • dlm-kmp-rt >= 6.4.0-150700.7.19.1
      • gfs2-kmp-rt >= 6.4.0-150700.7.19.1
      • kernel-devel-rt >= 6.4.0-150700.7.19.1
      • kernel-rt >= 6.4.0-150700.7.19.1
      • kernel-rt-devel >= 6.4.0-150700.7.19.1
      • kernel-source-rt >= 6.4.0-150700.7.19.1
      • kernel-syms-rt >= 6.4.0-150700.7.19.1
      • ocfs2-kmp-rt >= 6.4.0-150700.7.19.1
      		 Patchnames:
      SUSE-SLE-Module-RT-15-SP7-2025-3725
      SUSE Linux Enterprise Server 15 SP6
      SUSE Linux Enterprise Server for SAP Applications 15 SP6
      • kernel-64kb >= 6.4.0-150600.23.73.1
      • kernel-64kb-devel >= 6.4.0-150600.23.73.1
      • kernel-azure >= 6.4.0-150600.8.52.1
      • kernel-azure-devel >= 6.4.0-150600.8.52.1
      • kernel-default >= 6.4.0-150600.23.73.1
      • kernel-default-base >= 6.4.0-150600.23.73.1.150600.12.32.1
      • kernel-default-devel >= 6.4.0-150600.23.73.1
      • kernel-default-extra >= 6.4.0-150600.23.73.1
      • kernel-devel >= 6.4.0-150600.23.73.1
      • kernel-devel-azure >= 6.4.0-150600.8.52.1
      • kernel-docs >= 6.4.0-150600.23.73.1
      • kernel-macros >= 6.4.0-150600.23.73.1
      • kernel-obs-build >= 6.4.0-150600.23.73.1
      • kernel-source >= 6.4.0-150600.23.73.1
      • kernel-source-azure >= 6.4.0-150600.8.52.1
      • kernel-syms >= 6.4.0-150600.23.73.1
      • kernel-syms-azure >= 6.4.0-150600.8.52.1
      • kernel-zfcpdump >= 6.4.0-150600.23.73.1
      • reiserfs-kmp-default >= 6.4.0-150600.23.73.1
      		 Patchnames:
      SUSE-SLE-Module-Basesystem-15-SP6-2025-3600
      SUSE-SLE-Module-Development-Tools-15-SP6-2025-3600
      SUSE-SLE-Module-Legacy-15-SP6-2025-3600
      SUSE-SLE-Module-Public-Cloud-15-SP6-2025-3634
      SUSE-SLE-Product-WE-15-SP6-2025-3600
      SUSE Linux Enterprise Server 15 SP7
      SUSE Linux Enterprise Server for SAP Applications 15 SP7
      • kernel-64kb >= 6.4.0-150700.53.19.1
      • kernel-64kb-devel >= 6.4.0-150700.53.19.1
      • kernel-azure >= 6.4.0-150700.20.15.2
      • kernel-azure-devel >= 6.4.0-150700.20.15.2
      • kernel-default >= 6.4.0-150700.53.19.1
      • kernel-default-base >= 6.4.0-150700.53.19.1.150700.17.13.1
      • kernel-default-devel >= 6.4.0-150700.53.19.1
      • kernel-default-extra >= 6.4.0-150700.53.19.1
      • kernel-devel >= 6.4.0-150700.53.19.1
      • kernel-devel-azure >= 6.4.0-150700.20.15.2
      • kernel-docs >= 6.4.0-150700.53.19.1
      • kernel-macros >= 6.4.0-150700.53.19.1
      • kernel-obs-build >= 6.4.0-150700.53.19.1
      • kernel-source >= 6.4.0-150700.53.19.1
      • kernel-source-azure >= 6.4.0-150700.20.15.2
      • kernel-syms >= 6.4.0-150700.53.19.1
      • kernel-syms-azure >= 6.4.0-150700.20.15.1
      • kernel-zfcpdump >= 6.4.0-150700.53.19.1
      • reiserfs-kmp-default >= 6.4.0-150700.53.19.1
      		 Patchnames:
      SUSE-SLE-Module-Basesystem-15-SP7-2025-3601
      SUSE-SLE-Module-Development-Tools-15-SP7-2025-3601
      SUSE-SLE-Module-Legacy-15-SP7-2025-3601
      SUSE-SLE-Module-Public-Cloud-15-SP7-2025-3633
      SUSE-SLE-Product-WE-15-SP7-2025-3601
      SUSE Linux Enterprise Workstation Extension 15 SP6
      • kernel-default-extra >= 6.4.0-150600.23.73.1
      		 Patchnames:
      SUSE-SLE-Product-WE-15-SP6-2025-3600
      SUSE Linux Enterprise Workstation Extension 15 SP7
      • kernel-default-extra >= 6.4.0-150700.53.19.1
      		 Patchnames:
      SUSE-SLE-Product-WE-15-SP7-2025-3601
      SUSE Linux Micro 6.0
      • kernel-default >= 6.4.0-35.1
      • kernel-default-base >= 6.4.0-35.1.21.12
      • kernel-default-livepatch >= 6.4.0-35.1
      • kernel-devel >= 6.4.0-35.1
      • kernel-kvmsmall >= 6.4.0-35.1
      • kernel-macros >= 6.4.0-35.1
      • kernel-source >= 6.4.0-35.1
      		 Patchnames:
      SUSE-SLE-Micro-6.0-kernel-159
      SUSE Linux Micro 6.1
      • kernel-default >= 6.4.0-35.1
      • kernel-default-base >= 6.4.0-35.1.21.12
      • kernel-default-devel >= 6.4.0-35.1
      • kernel-default-livepatch >= 6.4.0-35.1
      • kernel-devel >= 6.4.0-35.1
      • kernel-kvmsmall >= 6.4.0-35.1
      • kernel-macros >= 6.4.0-35.1
      • kernel-source >= 6.4.0-35.1
      		 Patchnames:
      SUSE-SLE-Micro-6.1-kernel-159
      openSUSE Leap 15.6
      • cluster-md-kmp-64kb >= 6.4.0-150600.23.73.1
      • cluster-md-kmp-azure >= 6.4.0-150600.8.52.1
      • cluster-md-kmp-default >= 6.4.0-150600.23.73.1
      • cluster-md-kmp-rt >= 6.4.0-150600.10.55.1
      • dlm-kmp-64kb >= 6.4.0-150600.23.73.1
      • dlm-kmp-azure >= 6.4.0-150600.8.52.1
      • dlm-kmp-default >= 6.4.0-150600.23.73.1
      • dlm-kmp-rt >= 6.4.0-150600.10.55.1
      • dtb-allwinner >= 6.4.0-150600.23.73.1
      • dtb-altera >= 6.4.0-150600.23.73.1
      • dtb-amazon >= 6.4.0-150600.23.73.1
      • dtb-amd >= 6.4.0-150600.23.73.1
      • dtb-amlogic >= 6.4.0-150600.23.73.1
      • dtb-apm >= 6.4.0-150600.23.73.1
      • dtb-apple >= 6.4.0-150600.23.73.1
      • dtb-arm >= 6.4.0-150600.23.73.1
      • dtb-broadcom >= 6.4.0-150600.23.73.1
      • dtb-cavium >= 6.4.0-150600.23.73.1
      • dtb-exynos >= 6.4.0-150600.23.73.1
      • dtb-freescale >= 6.4.0-150600.23.73.1
      • dtb-hisilicon >= 6.4.0-150600.23.73.1
      • dtb-lg >= 6.4.0-150600.23.73.1
      • dtb-marvell >= 6.4.0-150600.23.73.1
      • dtb-mediatek >= 6.4.0-150600.23.73.1
      • dtb-nvidia >= 6.4.0-150600.23.73.1
      • dtb-qcom >= 6.4.0-150600.23.73.1
      • dtb-renesas >= 6.4.0-150600.23.73.1
      • dtb-rockchip >= 6.4.0-150600.23.73.1
      • dtb-socionext >= 6.4.0-150600.23.73.1
      • dtb-sprd >= 6.4.0-150600.23.73.1
      • dtb-xilinx >= 6.4.0-150600.23.73.1
      • gfs2-kmp-64kb >= 6.4.0-150600.23.73.1
      • gfs2-kmp-azure >= 6.4.0-150600.8.52.1
      • gfs2-kmp-default >= 6.4.0-150600.23.73.1
      • gfs2-kmp-rt >= 6.4.0-150600.10.55.1
      • kernel-64kb >= 6.4.0-150600.23.73.1
      • kernel-64kb-devel >= 6.4.0-150600.23.73.1
      • kernel-64kb-extra >= 6.4.0-150600.23.73.1
      • kernel-64kb-optional >= 6.4.0-150600.23.73.1
      • kernel-azure >= 6.4.0-150600.8.52.1
      • kernel-azure-devel >= 6.4.0-150600.8.52.1
      • kernel-azure-extra >= 6.4.0-150600.8.52.1
      • kernel-azure-optional >= 6.4.0-150600.8.52.1
      • kernel-azure-vdso >= 6.4.0-150600.8.52.1
      • kernel-debug >= 6.4.0-150600.23.73.1
      • kernel-debug-devel >= 6.4.0-150600.23.73.1
      • kernel-debug-vdso >= 6.4.0-150600.23.73.1
      • kernel-default >= 6.4.0-150600.23.73.1
      • kernel-default-base >= 6.4.0-150600.23.73.1.150600.12.32.1
      • kernel-default-base-rebuild >= 6.4.0-150600.23.73.1.150600.12.32.1
      • kernel-default-devel >= 6.4.0-150600.23.73.1
      • kernel-default-extra >= 6.4.0-150600.23.73.1
      • kernel-default-livepatch >= 6.4.0-150600.23.73.1
      • kernel-default-livepatch-devel >= 6.4.0-150600.23.73.1
      • kernel-default-optional >= 6.4.0-150600.23.73.1
      • kernel-default-vdso >= 6.4.0-150600.23.73.1
      • kernel-devel >= 6.4.0-150600.23.73.1
      • kernel-devel-azure >= 6.4.0-150600.8.52.1
      • kernel-devel-rt >= 6.4.0-150600.10.55.1
      • kernel-docs >= 6.4.0-150600.23.73.1
      • kernel-docs-html >= 6.4.0-150600.23.73.1
      • kernel-kvmsmall >= 6.4.0-150600.23.73.1
      • kernel-kvmsmall-devel >= 6.4.0-150600.23.73.1
      • kernel-kvmsmall-vdso >= 6.4.0-150600.23.73.1
      • kernel-macros >= 6.4.0-150600.23.73.1
      • kernel-obs-build >= 6.4.0-150600.23.73.1
      • kernel-obs-qa >= 6.4.0-150600.23.73.1
      • kernel-rt >= 6.4.0-150600.10.55.1
      • kernel-rt-devel >= 6.4.0-150600.10.55.1
      • kernel-rt-extra >= 6.4.0-150600.10.55.1
      • kernel-rt-livepatch-devel >= 6.4.0-150600.10.55.1
      • kernel-rt-optional >= 6.4.0-150600.10.55.1
      • kernel-rt-vdso >= 6.4.0-150600.10.55.1
      • kernel-rt_debug >= 6.4.0-150600.10.55.1
      • kernel-rt_debug-devel >= 6.4.0-150600.10.55.1
      • kernel-rt_debug-vdso >= 6.4.0-150600.10.55.1
      • kernel-source >= 6.4.0-150600.23.73.1
      • kernel-source-azure >= 6.4.0-150600.8.52.1
      • kernel-source-rt >= 6.4.0-150600.10.55.1
      • kernel-source-vanilla >= 6.4.0-150600.23.73.1
      • kernel-syms >= 6.4.0-150600.23.73.1
      • kernel-syms-azure >= 6.4.0-150600.8.52.1
      • kernel-syms-rt >= 6.4.0-150600.10.55.1
      • kernel-zfcpdump >= 6.4.0-150600.23.73.1
      • kselftests-kmp-64kb >= 6.4.0-150600.23.73.1
      • kselftests-kmp-azure >= 6.4.0-150600.8.52.1
      • kselftests-kmp-default >= 6.4.0-150600.23.73.1
      • kselftests-kmp-rt >= 6.4.0-150600.10.55.1
      • ocfs2-kmp-64kb >= 6.4.0-150600.23.73.1
      • ocfs2-kmp-azure >= 6.4.0-150600.8.52.1
      • ocfs2-kmp-default >= 6.4.0-150600.23.73.1
      • ocfs2-kmp-rt >= 6.4.0-150600.10.55.1
      • reiserfs-kmp-64kb >= 6.4.0-150600.23.73.1
      • reiserfs-kmp-azure >= 6.4.0-150600.8.52.1
      • reiserfs-kmp-default >= 6.4.0-150600.23.73.1
      • reiserfs-kmp-rt >= 6.4.0-150600.10.55.1
      		 Patchnames:
      openSUSE-SLE-15.6-2025-3600
      openSUSE-SLE-15.6-2025-3634
      openSUSE-SLE-15.6-2025-3751

      First public cloud image revisions this CVE is fixed in:

      Status of this issue by product and package

      Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification. The updates are grouped by state of their lifecycle. SUSE product lifecycles are documented on the lifecycle page.

      Product(s) Source package State
      Products under general support and receiving all security fixes.
      SUSE Linux Enterprise Desktop 15 SP6 kernel-64kb Released
      SUSE Linux Enterprise Desktop 15 SP6 kernel-default Released
      SUSE Linux Enterprise Desktop 15 SP6 kernel-default-base Released
      SUSE Linux Enterprise Desktop 15 SP6 kernel-docs Released
      SUSE Linux Enterprise Desktop 15 SP6 kernel-obs-build Released
      SUSE Linux Enterprise Desktop 15 SP6 kernel-source Released
      SUSE Linux Enterprise Desktop 15 SP6 kernel-syms Released
      SUSE Linux Enterprise Desktop 15 SP6 kernel-zfcpdump Released
      SUSE Linux Enterprise Desktop 15 SP7 kernel-64kb Released
      SUSE Linux Enterprise Desktop 15 SP7 kernel-default Released
      SUSE Linux Enterprise Desktop 15 SP7 kernel-default-base Released
      SUSE Linux Enterprise Desktop 15 SP7 kernel-docs Released
      SUSE Linux Enterprise Desktop 15 SP7 kernel-obs-build Released
      SUSE Linux Enterprise Desktop 15 SP7 kernel-source Released
      SUSE Linux Enterprise Desktop 15 SP7 kernel-syms Released
      SUSE Linux Enterprise Desktop 15 SP7 kernel-zfcpdump Released
      SUSE Linux Enterprise High Availability Extension 15 SP6 kernel-default Released
      SUSE Linux Enterprise High Availability Extension 15 SP7 kernel-default Released
      SUSE Linux Enterprise High Availability Extension 15 SP7 kernel-source Affected
      SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-64kb Released
      SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-azure Released
      SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-default Released
      SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-default-base Released
      SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-docs Released
      SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-obs-build Released
      SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-source Released
      SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-source-azure Released
      SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-syms Released
      SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-syms-azure Released
      SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-zfcpdump Released
      SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-64kb Released
      SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-azure Released
      SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-default Released
      SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-default-base Released
      SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-docs Released
      SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-obs-build Released
      SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-source Released
      SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-source-azure Released
      SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-syms Released
      SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-syms-azure Released
      SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-zfcpdump Released
      SUSE Linux Enterprise Live Patching 15 SP6 kernel-default Affected
      SUSE Linux Enterprise Live Patching 15 SP6 kernel-livepatch-SLE15-SP6-RT_Update_16 Released
      SUSE Linux Enterprise Live Patching 15 SP6 kernel-source Affected
      SUSE Linux Enterprise Live Patching 15 SP7 kernel-default Affected
      SUSE Linux Enterprise Live Patching 15 SP7 kernel-livepatch-SLE15-SP7-RT_Update_5 Released
      SUSE Linux Enterprise Live Patching 15 SP7 kernel-source Affected
      SUSE Linux Enterprise Micro 5.1 kernel-default Affected
      SUSE Linux Enterprise Micro 5.1 kernel-rt Affected
      SUSE Linux Enterprise Micro 5.1 kernel-source Affected
      SUSE Linux Enterprise Micro 5.1 kernel-source-rt Affected
      SUSE Linux Enterprise Micro 5.2 kernel-default Affected
      SUSE Linux Enterprise Micro 5.2 kernel-rt Affected
      SUSE Linux Enterprise Micro 5.2 kernel-source Affected
      SUSE Linux Enterprise Micro 5.2 kernel-source-rt Affected
      SUSE Linux Enterprise Micro 5.3 kernel-default Affected
      SUSE Linux Enterprise Micro 5.3 kernel-rt Affected
      SUSE Linux Enterprise Micro 5.3 kernel-source Affected
      SUSE Linux Enterprise Micro 5.3 kernel-source-rt Affected
      SUSE Linux Enterprise Micro 5.4 kernel-default Affected
      SUSE Linux Enterprise Micro 5.4 kernel-rt Affected
      SUSE Linux Enterprise Micro 5.4 kernel-source Affected
      SUSE Linux Enterprise Micro 5.4 kernel-source-rt Affected
      SUSE Linux Enterprise Micro 5.5 kernel-default Affected
      SUSE Linux Enterprise Micro 5.5 kernel-source Affected
      SUSE Linux Enterprise Micro 5.5 kernel-source-rt Affected
      SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-64kb Released
      SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-default Released
      SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-default-base Released
      SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-source Released
      SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-zfcpdump Released
      SUSE Linux Enterprise Module for Basesystem 15 SP7 kernel-64kb Released
      SUSE Linux Enterprise Module for Basesystem 15 SP7 kernel-default Released
      SUSE Linux Enterprise Module for Basesystem 15 SP7 kernel-default-base Released
      SUSE Linux Enterprise Module for Basesystem 15 SP7 kernel-source Released
      SUSE Linux Enterprise Module for Basesystem 15 SP7 kernel-zfcpdump Released
      SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-default Affected
      SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-docs Released
      SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-obs-build Released
      SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-source Released
      SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-syms Released
      SUSE Linux Enterprise Module for Development Tools 15 SP7 kernel-default Affected
      SUSE Linux Enterprise Module for Development Tools 15 SP7 kernel-docs Released
      SUSE Linux Enterprise Module for Development Tools 15 SP7 kernel-obs-build Released
      SUSE Linux Enterprise Module for Development Tools 15 SP7 kernel-source Released
      SUSE Linux Enterprise Module for Development Tools 15 SP7 kernel-syms Released
      SUSE Linux Enterprise Module for Legacy 15 SP6 kernel-default Released
      SUSE Linux Enterprise Module for Legacy 15 SP6 kernel-source Affected
      SUSE Linux Enterprise Module for Legacy 15 SP7 kernel-default Released
      SUSE Linux Enterprise Module for Legacy 15 SP7 kernel-source Affected
      SUSE Linux Enterprise Module for Public Cloud 15 SP6 kernel-azure Released
      SUSE Linux Enterprise Module for Public Cloud 15 SP6 kernel-source-azure Released
      SUSE Linux Enterprise Module for Public Cloud 15 SP6 kernel-syms-azure Released
      SUSE Linux Enterprise Module for Public Cloud 15 SP7 kernel-azure Released
      SUSE Linux Enterprise Module for Public Cloud 15 SP7 kernel-source-azure Released
      SUSE Linux Enterprise Module for Public Cloud 15 SP7 kernel-syms-azure Released
      SUSE Linux Enterprise Real Time 15 SP6 kernel-rt Released
      SUSE Linux Enterprise Real Time 15 SP6 kernel-rt_debug Released
      SUSE Linux Enterprise Real Time 15 SP6 kernel-source-rt Released
      SUSE Linux Enterprise Real Time 15 SP6 kernel-syms-rt Released
      SUSE Linux Enterprise Real Time 15 SP7 kernel-rt Released
      SUSE Linux Enterprise Real Time 15 SP7 kernel-source-rt Released
      SUSE Linux Enterprise Real Time 15 SP7 kernel-syms-rt Released
      SUSE Linux Enterprise Server 15 SP6 kernel-64kb Released
      SUSE Linux Enterprise Server 15 SP6 kernel-azure Released
      SUSE Linux Enterprise Server 15 SP6 kernel-default Released
      SUSE Linux Enterprise Server 15 SP6 kernel-default-base Released
      SUSE Linux Enterprise Server 15 SP6 kernel-docs Released
      SUSE Linux Enterprise Server 15 SP6 kernel-obs-build Released
      SUSE Linux Enterprise Server 15 SP6 kernel-source Released
      SUSE Linux Enterprise Server 15 SP6 kernel-source-azure Released
      SUSE Linux Enterprise Server 15 SP6 kernel-syms Released
      SUSE Linux Enterprise Server 15 SP6 kernel-syms-azure Released
      SUSE Linux Enterprise Server 15 SP6 kernel-zfcpdump Released
      SUSE Linux Enterprise Server 15 SP7 kernel-64kb Released
      SUSE Linux Enterprise Server 15 SP7 kernel-azure Released
      SUSE Linux Enterprise Server 15 SP7 kernel-default Released
      SUSE Linux Enterprise Server 15 SP7 kernel-default-base Released
      SUSE Linux Enterprise Server 15 SP7 kernel-docs Released
      SUSE Linux Enterprise Server 15 SP7 kernel-obs-build Released
      SUSE Linux Enterprise Server 15 SP7 kernel-source Released
      SUSE Linux Enterprise Server 15 SP7 kernel-source-azure Released
      SUSE Linux Enterprise Server 15 SP7 kernel-syms Released
      SUSE Linux Enterprise Server 15 SP7 kernel-syms-azure Released
      SUSE Linux Enterprise Server 15 SP7 kernel-zfcpdump Released
      SUSE Linux Enterprise Server 16.0 kernel-default Affected
      SUSE Linux Enterprise Server 16.0 kernel-source Affected
      SUSE Linux Enterprise Server 16.0 kernel-source-azure Affected
      SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-64kb Released
      SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-azure Released
      SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-default Released
      SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-default-base Released
      SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-docs Released
      SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-obs-build Released
      SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-source Released
      SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-source-azure Released
      SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-syms Released
      SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-syms-azure Released
      SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-zfcpdump Released
      SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-64kb Released
      SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-azure Released
      SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-default Released
      SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-default-base Released
      SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-docs Released
      SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-obs-build Released
      SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-source Released
      SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-source-azure Released
      SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-syms Released
      SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-syms-azure Released
      SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-zfcpdump Released
      SUSE Linux Enterprise Server for SAP Applications 16.0 kernel-source Affected
      SUSE Linux Enterprise Server for SAP Applications 16.0 kernel-source-azure Affected
      SUSE Linux Enterprise Workstation Extension 15 SP6 kernel-default Released
      SUSE Linux Enterprise Workstation Extension 15 SP6 kernel-source Affected
      SUSE Linux Enterprise Workstation Extension 15 SP7 kernel-default Released
      SUSE Linux Enterprise Workstation Extension 15 SP7 kernel-source Affected
      SUSE Linux Micro 6.0 kernel-default Released
      SUSE Linux Micro 6.0 kernel-default-base Released
      SUSE Linux Micro 6.0 kernel-kvmsmall Released
      SUSE Linux Micro 6.0 kernel-source Released
      SUSE Linux Micro 6.0 kernel-source-rt Released
      SUSE Linux Micro 6.1 kernel-default Released
      SUSE Linux Micro 6.1 kernel-default-base Released
      SUSE Linux Micro 6.1 kernel-kvmsmall Released
      SUSE Linux Micro 6.1 kernel-source Released
      SUSE Linux Micro 6.1 kernel-source-rt Released
      SUSE Linux Micro 6.2 kernel-source Affected
      SUSE Real Time Module 15 SP6 kernel-rt Released
      SUSE Real Time Module 15 SP6 kernel-rt_debug Released
      SUSE Real Time Module 15 SP6 kernel-source-rt Released
      SUSE Real Time Module 15 SP6 kernel-syms-rt Released
      SUSE Real Time Module 15 SP7 kernel-rt Released
      SUSE Real Time Module 15 SP7 kernel-source-rt Released
      SUSE Real Time Module 15 SP7 kernel-syms-rt Released
      openSUSE Leap 15.6 kernel-default Affected
      openSUSE Leap 15.6 kernel-source In progress
      openSUSE Leap 15.6 kernel-source-azure In progress
      openSUSE Leap 15.6 kernel-source-rt In progress
      Products under Long Term Service Pack support and receiving important and critical security fixes.
      SUSE Linux Enterprise High Performance Computing 15 SP3 kernel-source Affected
      SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kernel-source Affected
      SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-default Affected
      SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-source Affected
      SUSE Linux Enterprise High Performance Computing 15 SP4 kernel-source Affected
      SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default Affected
      SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-source Affected
      SUSE Linux Enterprise High Performance Computing 15 SP5 kernel-source Affected
      SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-default Affected
      SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-source Affected
      SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-default Affected
      SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-source Affected
      SUSE Linux Enterprise Live Patching 12 SP5 kernel-default Affected
      SUSE Linux Enterprise Live Patching 12 SP5 kernel-source Affected
      SUSE Linux Enterprise Live Patching 15 SP3 kernel-default Affected
      SUSE Linux Enterprise Live Patching 15 SP3 kernel-source Affected
      SUSE Linux Enterprise Live Patching 15 SP4 kernel-default Affected
      SUSE Linux Enterprise Live Patching 15 SP4 kernel-source Affected
      SUSE Linux Enterprise Live Patching 15 SP5 kernel-default Affected
      SUSE Linux Enterprise Live Patching 15 SP5 kernel-source Affected
      SUSE Linux Enterprise Module for Basesystem 15 SP3 kernel-source Affected
      SUSE Linux Enterprise Module for Basesystem 15 SP4 kernel-source Affected
      SUSE Linux Enterprise Module for Basesystem 15 SP5 kernel-source Affected
      SUSE Linux Enterprise Module for Development Tools 15 SP3 kernel-source Affected
      SUSE Linux Enterprise Module for Development Tools 15 SP4 kernel-source Affected
      SUSE Linux Enterprise Module for Development Tools 15 SP5 kernel-source Affected
      SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-default Affected
      SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-source Affected
      SUSE Linux Enterprise Server 12 SP5 kernel-source Affected
      SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default Affected
      SUSE Linux Enterprise Server 12 SP5-LTSS kernel-source Affected
      SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security kernel-default Affected
      SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security kernel-source Affected
      SUSE Linux Enterprise Server 15 SP3 kernel-source Affected
      SUSE Linux Enterprise Server 15 SP3-LTSS kernel-default Affected
      SUSE Linux Enterprise Server 15 SP3-LTSS kernel-source Affected
      SUSE Linux Enterprise Server 15 SP4 kernel-source Affected
      SUSE Linux Enterprise Server 15 SP4-LTSS kernel-default Affected
      SUSE Linux Enterprise Server 15 SP4-LTSS kernel-source Affected
      SUSE Linux Enterprise Server 15 SP5 kernel-source Affected
      SUSE Linux Enterprise Server 15 SP5-LTSS kernel-default Affected
      SUSE Linux Enterprise Server 15 SP5-LTSS kernel-source Affected
      SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 kernel-source Affected
      SUSE Manager Proxy 4.3 kernel-source Affected
      SUSE Manager Proxy LTS 4.3 kernel-default Affected
      SUSE Manager Proxy LTS 4.3 kernel-source Affected
      SUSE Manager Retail Branch Server 4.3 kernel-source Affected
      SUSE Manager Retail Branch Server LTS 4.3 kernel-default Affected
      SUSE Manager Retail Branch Server LTS 4.3 kernel-source Affected
      SUSE Manager Server 4.3 kernel-source Affected
      SUSE Manager Server LTS 4.3 kernel-default Affected
      SUSE Manager Server LTS 4.3 kernel-source Affected
      Products past their end of life and not receiving proactive updates anymore.
      SUSE CaaS Platform 4.0 kernel-source Affected
      SUSE Enterprise Storage 6 kernel-source Affected
      SUSE Enterprise Storage 7 kernel-source Affected
      SUSE Enterprise Storage 7.1 kernel-source Affected
      SUSE Linux Enterprise Desktop 11 SP4 kernel-source Affected
      SUSE Linux Enterprise Desktop 12 SP2 kernel-source Affected
      SUSE Linux Enterprise Desktop 12 SP4 kernel-source Affected
      SUSE Linux Enterprise Desktop 15 kernel-source Affected
      SUSE Linux Enterprise Desktop 15 SP1 kernel-source Affected
      SUSE Linux Enterprise Desktop 15 SP2 kernel-source Affected
      SUSE Linux Enterprise Desktop 15 SP3 kernel-source Affected
      SUSE Linux Enterprise Desktop 15 SP4 kernel-source Affected
      SUSE Linux Enterprise Desktop 15 SP5 kernel-source Affected
      SUSE Linux Enterprise High Performance Computing 15 kernel-source Affected
      SUSE Linux Enterprise High Performance Computing 15 SP1 kernel-source Affected
      SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS kernel-source Affected
      SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-source Affected
      SUSE Linux Enterprise High Performance Computing 15 SP2 kernel-source Affected
      SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS kernel-source Affected
      SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-source Affected
      SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-source Affected
      SUSE Linux Enterprise High Performance Computing 15-ESPOS kernel-source Affected
      SUSE Linux Enterprise High Performance Computing 15-LTSS kernel-source Affected
      SUSE Linux Enterprise Micro 5.0 kernel-default Affected
      SUSE Linux Enterprise Module for Basesystem 15 kernel-source Affected
      SUSE Linux Enterprise Module for Basesystem 15 SP1 kernel-source Affected
      SUSE Linux Enterprise Module for Basesystem 15 SP2 kernel-source Affected
      SUSE Linux Enterprise Module for Development Tools 15 kernel-source Affected
      SUSE Linux Enterprise Module for Development Tools 15 SP1 kernel-source Affected
      SUSE Linux Enterprise Module for Development Tools 15 SP2 kernel-source Affected
      SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT kernel-source Affected
      SUSE Linux Enterprise Real Time 15 SP2 kernel-source Affected
      SUSE Linux Enterprise Real Time 15 SP3 kernel-source Affected
      SUSE Linux Enterprise Real Time 15 SP3 kernel-source-rt Affected
      SUSE Linux Enterprise Real Time 15 SP4 kernel-source Affected
      SUSE Linux Enterprise Real Time 15 SP4 kernel-source-rt Affected
      SUSE Linux Enterprise Real Time 15 SP5 kernel-source-rt Affected
      SUSE Linux Enterprise Server 11 SP4 kernel-source Affected
      SUSE Linux Enterprise Server 11 SP4 LTSS kernel-default Affected
      SUSE Linux Enterprise Server 11 SP4 LTSS kernel-source Affected
      SUSE Linux Enterprise Server 11 SP4-LTSS kernel-source Affected
      SUSE Linux Enterprise Server 12 SP2 kernel-source Affected
      SUSE Linux Enterprise Server 12 SP2-BCL kernel-source Affected
      SUSE Linux Enterprise Server 12 SP2-ESPOS kernel-source Affected
      SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default Affected
      SUSE Linux Enterprise Server 12 SP2-LTSS kernel-source Affected
      SUSE Linux Enterprise Server 12 SP4 kernel-source Affected
      SUSE Linux Enterprise Server 12 SP4-ESPOS kernel-source Affected
      SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default Affected
      SUSE Linux Enterprise Server 12 SP4-LTSS kernel-source Affected
      SUSE Linux Enterprise Server 15 kernel-source Affected
      SUSE Linux Enterprise Server 15 SP1 kernel-source Affected
      SUSE Linux Enterprise Server 15 SP1-BCL kernel-source Affected
      SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default Affected
      SUSE Linux Enterprise Server 15 SP1-LTSS kernel-source Affected
      SUSE Linux Enterprise Server 15 SP2 kernel-source Affected
      SUSE Linux Enterprise Server 15 SP2-BCL kernel-source Affected
      SUSE Linux Enterprise Server 15 SP2-LTSS kernel-default Affected
      SUSE Linux Enterprise Server 15 SP2-LTSS kernel-source Affected
      SUSE Linux Enterprise Server 15 SP3-BCL kernel-source Affected
      SUSE Linux Enterprise Server 15-LTSS kernel-default Affected
      SUSE Linux Enterprise Server 15-LTSS kernel-source Affected
      SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 kernel-source Affected
      SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-source Affected
      SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-source Affected
      SUSE Linux Enterprise Server for SAP Applications 15 kernel-source Affected
      SUSE Linux Enterprise Server for SAP Applications 15 SP1 kernel-source Affected
      SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-source Affected
      SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-default Affected
      SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-source Affected
      SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-default Affected
      SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-source Affected
      SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-default Affected
      SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-source Affected
      SUSE Manager Proxy 4.0 kernel-source Affected
      SUSE Manager Proxy 4.1 kernel-source Affected
      SUSE Manager Proxy 4.2 kernel-source Affected
      SUSE Manager Retail Branch Server 4.0 kernel-source Affected
      SUSE Manager Retail Branch Server 4.1 kernel-source Affected
      SUSE Manager Retail Branch Server 4.2 kernel-source Affected
      SUSE Manager Server 4.0 kernel-source Affected
      SUSE Manager Server 4.1 kernel-source Affected
      SUSE Manager Server 4.2 kernel-source Affected
      SUSE OpenStack Cloud 7 kernel-source Affected
      SUSE OpenStack Cloud 9 kernel-source Affected
      SUSE OpenStack Cloud Crowbar 9 kernel-source Affected
      SUSE Real Time Module 15 SP3 kernel-source-rt Affected
      SUSE Real Time Module 15 SP4 kernel-source-rt Affected
      SUSE Real Time Module 15 SP5 kernel-source-rt Affected
      openSUSE Leap 15.3 kernel-source Affected
      openSUSE Leap 15.3 kernel-source-rt Affected
      openSUSE Leap 15.4 kernel-source Affected
      openSUSE Leap 15.4 kernel-source-rt Affected
      openSUSE Leap 15.5 kernel-source Affected
      openSUSE Leap 15.5 kernel-source-rt Affected

      SUSE Timeline for this CVE

      CVE page created: Thu Sep 11 20:01:51 2025
      CVE page last modified: Fri Oct 24 16:56:09 2025